Software update: phpAdsNew 2.0.6

A new version of the software has appeared on the phpAdsNew site in the form of 2.0.6. phpAdsNew is an open source banner system that allows banner management within your site. The program contains various options to make statistics of the advertisements that have been run, to run certain banners on a part of the site and to focus campaigns on specific targets. phpAdsNew needs an environment with MySQL and PHP in combination with Apache or Microsoft IIS. A vulnerability was found in the XML-RPC code in the previous version of the program. In version 2.0.6, this vulnerability has been fixed and it is no longer possible to run code on the system where phpAdsNew is installed. In addition, the developers have also built in a number of new features. You can read exactly what those are below:

A serious security issue has been discovered in our bundled XML-RPC library. This issue allows for possible remote code execution. We have upgraded the XML-RPC component to the fixed version and released phpAdsNew and phpPgAds 2.0.5. Every user is urged to upgrade. As a temporary hotfix you can delete your adxmlrpc.php file so that your adserver will not easily allow execution of maliclius XML-RPC method calls. Also, the newly added features are:

• a workaround to avoid exceeding the 20 cookie limit, which can be enabled inside the invocation settings;
• full support to all MaxMind database types;
• support for transparent Flash banners.